PT-2001-1686 · Jelsoft · Vbulletin

Publicado 2001-06-27 · Atualizado 2017-10-10 · CVE-2001-0475

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions vBulletin version not specified

Description The issue is related to the improper initialization of a PHP variable used to store template information in the index.php file of Jelsoft vBulletin. This allows remote attackers to execute arbitrary PHP code by including special characters in the templatecache parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-0475

Produtos afetados

Vbulletin

Referências · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0475 · Nota de Segurança
• http://securityfocus.com/bid/2474 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0475 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6237 · Nota
• http://vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839 · Aviso do Fabricante